vortex (James McLean)

nerva. Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian

ESP32-CAN-X2. Hello world sample code for the ESP32-S3 dual CAN bus development board

DIY-ESP32-Thermal-Tire-Temperature. A custom-built motorsport tire temperature system powered by ESP32 and MLX90640 thermal cameras. The project uses ESP-NOW for low-latency wireless telemetry, performs real-time multi-zone tread analysis, includes a browser-based calibration interface, and is designed for track-focused vehicle setup and tire performance tuning.

opendbc. a Python API for your car

DIY-ESP32-Race-Scales. Project I developed to weigh all 4 corners of a vehicle using esp32's, hx711's, and load cells and presenting those measurements on webpage.

titus. High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

MINE-Wordlist. List of Mine Private wordlist i use for fuzzing

vulnerability-spoiler-alert-action. GitHub Action to alert on security patches before the CVE drops.

Burp-Suite-Certified-Practitioner-Exam-Study. Burp Suite Certified Practitioner Exam Study

BurpSuiteCertifiedPractitioner. Ultimate Burp Suite Exam and PortSwigger Labs Guide.

sj. A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

Windows-Exploit-Suggester. This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

gogo. 面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams

CSPBypass. CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting) vulnerabilities on sites where injections are blocked by CSPs that only allow certain whitelisted domains.

Open-Redirect-Payloads. Open Redirect Payloads

recollapse. REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

mcp-hack. MCP(Model Context Protocol) Hack Toolkit

syft. CLI tool and library for generating a Software Bill of Materials from container images and filesystems

cloudproxy. Hide your scrapers IP behind the cloud. Provision proxy servers across different cloud providers to improve your scraping success.

agent_asteroid. Agent responsible for detecting remote vulnerabilities, a robust scanner.

KEV. Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

crithit. Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

bbot. The recursive internet scanner for hackers. 🧡

can_to_lin. T4 based CAN to LIN module for control of LIN based devices via CAN commands

svg-cheatsheet. A cheatsheet for exploiting server-side SVG processors.

template-injection-table. The Template Injection Table is intended to help during the testing of an application for template injection vulnerabilities.

graphql-voyager. 🛰️ Represent any GraphQL API as an interactive graph

clairvoyance. Obtain GraphQL API schema even if the introspection is disabled

graphql-wordlist. The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.

weird_proxies. Reverse proxies cheatsheet

PT-CAN-DEV-BOARD. C++

PwnXSS. PwnXSS: Vulnerability (XSS) scanner exploit

Security-Research. Exploits written by the Rhino Security Labs team

LOLRMM. LotL RMM

s3enum. Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.

wesng. Windows Exploit Suggester - Next Generation

DomainPasswordSpray. DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

inql. InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

pentest-book.

Tiny-XSS-Payloads. A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

pentest-tools. A collection of custom security tools for quick needs.

mksub. Generate tens of thousands of subdomain combinations in a matter of seconds

resolvers. The most exhaustive list of reliable DNS resolvers.

sccmhound. A BloodHound collector for Microsoft Configuration Manager

lotp. Supply Chain Security Research - Living Off The Pipeline tools

vulnerable-AD. Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

ActiveScanPlusPlus. ActiveScan++ Burp Suite Plugin

tweetXer. Delete all your Tweets for free

StreamController. An elegant Linux app for the Elgato Stream Deck with support for plugins

streamdeck-plus-software. Unofficial streamdeck+ software, made using Python (GUI made using Python's Tkinter)

MagicMirror. MagicMirror² is an open source modular smart mirror platform. With a growing list of installable modules, the MagicMirror² allows you to convert your hallway or bathroom mirror into your personal assistant.

mapcidr. Utility program to perform multiple operations for a given subnet/CIDR ranges.

katana. A next-generation crawling and spidering framework.

notify. Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

cdncheck. A utility to detect various technology for a given IP address.

subfinder. Fast passive subdomain enumeration tool.

naabu. A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

public-bugbounty-programs. Community curated list of public bug bounty and responsible disclosure programs.

actions. ProjectDiscovery's Composite Actions

nuclei. Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

LOLAD-Project.github.io. https://lolad-project.github.io/

blind-ssrf-chains. An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

gcpwn. Pentesting framework for GCP that enumerates/downloads data that feeds into a BloodHound Opengraph model. Includes credential management, workspace management, exploit scripts, etc.

sanicdns. Gotta go fast

webanalyze. Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

webappanalyzer. This project aims to maintain Wappalyzer technologies

keyboards. @tzarc's custom keyboard designs.

docker-images. Official source of container configurations, images, and examples for Oracle products and projects

driftwood. Private key usage verification

cookiemonster. 🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

hetty. An HTTP toolkit for security research.

SSRFmap. Automatic SSRF fuzzer and exploitation tool

writeups. Shell

gowap. Wappalyzer implementation in Go

SSRF-Testing. SSRF (Server Side Request Forgery) testing resources

Trufflehog-Chrome-Extension. JavaScript

gitleaks. Find secrets with Gitleaks 🔑

vulhub. Pre-Built Vulnerable Environments Based on Docker-Compose

python-digitalocean. 🐍🐳 Python module to manage Digital Ocean droplets

the-nuclei-templates. Nuclei templates written by geeknik. Claude is my co-pilot. 🤖

can-i-take-over-dns. "Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.

echo. High performance, minimalist Go web framework

echox. Echo cookbook and website

zmap. ZMap is a fast single packet network scanner designed for Internet-wide network surveys.

zgrab2. Fast Application Layer Scanner

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

inception. A highly configurable Framework for easy automated web scanning

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Auto_Wordlists. Python

hacktricks. Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

malicious-pdf. 💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

interactsh. An OOB interaction gathering server and client library

kiterunner. Contextual Content Discovery Tool

nuclei-templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

hakrawler. Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

bugcrowd_university. Open source education content for the researcher community

LiveTargetsFinder. Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts and gather service information

DNSGrep. Quickly Search Large DNS Datasets

dnsgrep. Quickly Search Large DNS Datasets

ActiveReign. A Network Enumeration and Attack Toolset for Windows Active Directory Environments.

pwn_jenkins. Notes about attacking Jenkins servers

jenkinz. Retrieve the complete build history for every job ever created and executed on a given Jenkins instance.

AllThingsSSRF. This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

keyhacks. Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

jLoot. JIRA Secure Attachment Looter

gomassdns. A better dns bruteforcer written in golang

ReconJSON. ReconJSON is a project dedicated to creating a flexible and consistent JSON format across popular recon tools.

ShellPop. Pop shells like a master.

DetectionLab. Automate the creation of a lab environment complete with security tooling and logging best practices

Minesweeper. A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

Mobile-Security-Framework-MobSF. Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

MobileApp-Pentest-Cheatsheet. The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.